Add administrator sign-in and private-safe room directory

Connect personal operator-provisioned admin keys, persisted roles and eight-hour sessions, current/all-session revocation and a filtered room directory. Additive schema protects final owner, revokes disabled accounts and records safe audit history. No game state changes; remaining administration scope stays explicit.

Verified: typecheck, lint, 5196 offline tests, 52 HTTP tests, production build; authenticated local HTTP and desktop/mobile browser checks. Independent privacy/security review fixed malformed nested roster searches and read-time session revocation. Preserved 1,671 prior rooms and 3,538 seats. Container/deployed acceptance follows publication.
This commit is contained in:
Quintine committed 2026-09-22 09:36:11 +10:00
1 parent 36a03bda9c
commit c2d392e155
27 files changed
+3164 -13

No files matched your search

+17
View File
@@ -1,5 +1,22 @@
# Dune implementation status
## 22 September 2026 — Administrator access and room directory prototype
The first [admin panel](ADMIN_PANEL.md#access-and-directory-prototype) slice adds
personal operator-provisioned keys, live owner/operator/viewer permissions,
separate persistent eight-hour sessions, current/all-session sign-out and a
privacy-preserving room directory. Additive schema/trigger changes protect the
last enabled owner, invalidate disabled-account sessions and retain safe audit
events. Filters, paging, public roster inspection, refresh and mobile controls
are connected; no existing game state is rewritten.
Independent review found and resolved malformed-roster search failure and a
revocation race at directory reads. Focused auth/SQL/privacy tests, authenticated
HTTP and local browser checks precede source-bound check/build/integration and
deployed acceptance. Evidence and actual final results belong to the checkpoint
report. Room lifecycle, creation, participant support, backups, audit browsing
and complete administration acceptance remain open; AI refinement remains gated.
## 22 September 2026 — Administration and deployed verification added to the goal
The user requested a complete [admin panel](ADMIN_PANEL.md), including adding